How do I restrict internet browsing?

[slicksilver]

The idea is to not allow the user to browse the internet but to allow him to make remote backups of his system. Do I need to purchase additional software for this ? Im running a clean installation of Vista Business 32 bit.

Thanks guys

 

[Fayd]

kill port 80 on his machine?

 

[slicksilver]

How do you do that?

 

[Ken g6]

Probably the best way to do it is upstream, on a router or something.

If that's not possible, you could use WIPFW. Here's an example config file:

# First flush the firewall rules
-f flush

# Localhost rules
add 100 allow all from any to any via lo*

# Prevent any traffic to 127.0.0.1, common in localhost spoofing
add 110 deny log all from any to 127.0.0.0/8 in
add 110 deny log all from 127.0.0.0/8 to any in

# Receive no pings from anywhere except the local network.
add 170 allow icmp from any to any in recv eth0 icmptype 0,11
add 180 deny icmp from not me to any

# DNS
add 200 allow udp from any 53 to any
add 200 allow udp from any to any 53

# DHCP
add pass udp from any 67-68 to any 67-68

# Add your remote backup rules here.

# Deny all other traffic
add deny ip from any to any